CVE-2025-8788

LOW EPSS 17.8%

Published Aug 10, 202510mo ago · Modified Jun 17, 20261w ago

2.0 CVSS 4.0

Low

Published Aug 10, 2025 10mo ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Details

Base Score

2.0

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction P

Scope X

Threat Intelligence

EPSS Exploit Probability

17.8% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 2

CWE-79 Cross-site Scripting Injection

CWE-94 Improper Control of Generation of Code (Code Injection) Injection

Affected Products 1

Vendor	Product	Version	Range
portabilis	i-diario	*	≤1.5.0

References 5

github.com https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8788.md

ExploitThird Party Advisory
github.com https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-aula-por-areas-de-conhecimento.(ID)%20in%20multiples%20parameters.md

Broken Link
vuldb.com https://vuldb.com/?ctiid.319316

Permissions RequiredVDB Entry
vuldb.com https://vuldb.com/?id.319316

Third Party AdvisoryVDB Entry
vuldb.com https://vuldb.com/?submit.625799

Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.